Merge "Add `privileged` SCC to SA in OpenShift DevStack" into stable/queens
This commit is contained in:
commit
e04d930e94
|
@ -143,6 +143,11 @@ function run_containerized_kuryr_resources {
|
||||||
/usr/local/bin/kubectl create -f \
|
/usr/local/bin/kubectl create -f \
|
||||||
"${k8s_data_dir}/service_account.yml" \
|
"${k8s_data_dir}/service_account.yml" \
|
||||||
|| die $LINENO "Failed to create kuryr-kubernetes ServiceAccount."
|
|| die $LINENO "Failed to create kuryr-kubernetes ServiceAccount."
|
||||||
|
|
||||||
|
if is_service_enabled openshift-master; then
|
||||||
|
# NOTE(dulek): For OpenShift add privileged SCC to serviceaccount.
|
||||||
|
/usr/local/bin/oadm policy add-scc-to-user privileged -n kube-system -z kuryr-controller
|
||||||
|
fi
|
||||||
/usr/local/bin/kubectl create -f \
|
/usr/local/bin/kubectl create -f \
|
||||||
"${k8s_data_dir}/controller_deployment.yml" \
|
"${k8s_data_dir}/controller_deployment.yml" \
|
||||||
|| die $LINENO "Failed to create kuryr-kubernetes Deployment."
|
|| die $LINENO "Failed to create kuryr-kubernetes Deployment."
|
||||||
|
|
Loading…
Reference in New Issue